[Wactclc-alma] [External] FW: UPDATE: Impact of Google Chrome browser updates on Ex Libris products – Due February 4th, 2020 (Security Advisory)

[Herman, Amy]

I’ve been following this same discussion on the ezproxy listserv and although it sounds like it might cause some trouble, the people who are more tech literate than I have found a way to test the new Chrome settings in advance and have yet to discover any actual issues while using the new version.  If that helps…?

Amy Herman
Library Faculty | Olympic College
1600 Chester Avenue | Bremerton, WA 98337
aherman at olympic.edu<mailto:aherman at olympic.edu> | 360-475-7256



From: Wactclc-alma <wactclc-alma-bounces at lists.ctc.edu> On Behalf Of Traci Taylor
Sent: Thursday, January 30, 2020 12:45 PM
To: WACTCLC Alma Discussion <wactclc-alma at lists.ctc.edu>
Subject: [External][Wactclc-alma] FW: UPDATE: Impact of Google Chrome browser updates on Ex Libris products – Due February 4th, 2020 (Security Advisory)

Caution: This email originated from outside OC. Please be very cautious of links in emails that take you outside the college and ask you to provide your OC credentials. If unsure, call the IT Help Desk @ 360.475.7600. Thank you.

Hello,

Is this something that we need to be concerned about?

Thanks,
Traci



[cid:image002.jpg at 01D5D77B.85BEF050]<https://www.btc.edu/>Traci Taylor, MLS
Lead Librarian
Bellingham Technical College<http://www.btc.edu/>
3028 Lindbergh Ave. | Bellingham, WA 98225
Call: 360.752.8488 | Office: CC 327
Connectedness • Professionalism • Integrity
Providing student-centered, high-quality professional technical
education for today’s needs and tomorrow’s opportunities.




From: Primo <primo-bounces at exlibrisusers.org<mailto:primo-bounces at exlibrisusers.org>> On Behalf Of Scott Schuetze via Primo
Sent: Thursday, January 30, 2020 11:43 AM
To: Ex Libris user community discussion list for Primo <primo at exlibrisusers.org<mailto:primo at exlibrisusers.org>>
Cc: Scott Schuetze <Scott.Schuetze at proquest.com<mailto:Scott.Schuetze at proquest.com>>
Subject: [Primo] UPDATE: Impact of Google Chrome browser updates on Ex Libris products – Due February 4th, 2020 (Security Advisory)

Dear Colleagues,

On February 4th, 2020, Google will roll out a new version of Google Chrome (80) that will implement a secure-by-default model for cookies, enabled by a new classification system. This model intends to protect users from cross-site request forgery<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fowasp.org%2Fwww-community%2Fattacks%2Fcsrf&data=02%7C01%7CTomer.Shemesh%40exlibrisgroup.com%7Cf14293b4153342516d9608d7a5b9d5b4%7Cc598e59c2e194342a52ba055a26296c6%7C0%7C0%7C637160089893092395&sdata=%2BvcTfpCQ7BG0hJyH8T9BBmd76gQCGe18DKVkTehl070%3D&reserved=0>, where an innocent end-user is tricked by an attacker into submitting a web request that they did not intend. As of February 2020, only cookies tagged as Secure will be able to send cross-sites and will require encrypted HTTPS connection access.

Custom integrations relying on non-secure (HTTP) protocol or cookie, might be impacted in Google Chrome.

Ex Libris deployed the required configuration to all Ex Libris cloud servers for the following Ex Libris products: Alma, Primo, Esploro, Leganto, Summon, campusM, RapidILL, RefWorks, Rosetta, Pivot, Research professional, Aleph, Voyager, Intota, Ulrich's, MetaLib, DigiTool.

SFX - Impact to the Link Resolver Sidebar; see Google Chrome (80) Update and Possible Impact on SFX <https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fknowledge.exlibrisgroup.com%2FSFX%2FKnowledge_Articles%2FThe_Google_Chrome_(80)_Update_and_Possible_Impact_on_SFX&data=02%7C01%7CTomer.Shemesh%40exlibrisgroup.com%7Cf14293b4153342516d9608d7a5b9d5b4%7Cc598e59c2e194342a52ba055a26296c6%7C0%7C0%7C637160089893102392&sdata=3vmXMZZpUa3tUCx1h%2FkWVBimRWkpESkTwak1jozli50%3D&reserved=0>

360 – Impact to 360 Link Sidebar uses ‘iframes’ to embed external content and links in its pages; see Impact of Google Chrome version 80 on 360 Link<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fknowledge.exlibrisgroup.com%2F%3Ftitle%3D360_Services%252F360_Link%252FKnowledge_Articles%252FWhat_is_the_impact_of_Google_Chrome_version_80_on_360_Link%25253F&data=02%7C01%7CTomer.Shemesh%40exlibrisgroup.com%7Cf14293b4153342516d9608d7a5b9d5b4%7Cc598e59c2e194342a52ba055a26296c6%7C0%7C0%7C637160089893102392&sdata=aC34s%2BE%2BROX447i7fssiNTqbhls4h1Pk0anwZR3PWVo%3D&reserved=0>

For more details see : Security advisory article – Google Chrome Browser version 80 Updates and Ex Libris products and services - January 30, 2020<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fknowledge.exlibrisgroup.com%2FCross_Product%2FSecurity%2FAdvisories%2FSecurity_Advisory_%25E2%2580%2593_Google_Chrome_Browser_version_80_Updates_and_Ex_Libris_products_and_services_-_January_30%252C_2020&data=02%7C01%7CTomer.Shemesh%40exlibrisgroup.com%7Cf14293b4153342516d9608d7a5b9d5b4%7Cc598e59c2e194342a52ba055a26296c6%7C0%7C0%7C637160089893112375&sdata=n%2BANBu1P%2BQxILzLYCi4FqbPzHxAacLMvVnhgMveVuOc%3D&reserved=0>

Kind regards,

The Ex Libris Team



Scott Schuetze
Sr. Product Marketing Manager – Discovery
Scott.Schuetze at exlibrisgroup.com<mailto:Scott.Schuetze at exlibrisgroup.com>
[cid:image006.png at 01D5D77B.85B7C460]<http://www.exlibrisgroup.com/>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20200130/1d14aa20/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 17275 bytes
Desc: image001.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20200130/1d14aa20/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 897 bytes
Desc: image005.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20200130/1d14aa20/attachment-0007.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 7740 bytes
Desc: image006.png
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20200130/1d14aa20/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 3346 bytes
Desc: image002.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20200130/1d14aa20/attachment-0008.jpg>